Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/3a252a-af4b-4eea-acdb-2fdd1fd99657/1/EL75w5BlrvRWAptvOAinR9B6HnM.roa
File: EL75w5BlrvRWAptvOAinR9B6HnM.roa (raw, json)
Hash identifier: IqbW0Lwt/PVCPpeClBOpUpPxXoRlgEuXWSb+vub0PwI=
Subject key identifier: 10:BE:F9:C3:90:65:AE:F4:56:02:9B:6F:38:08:A7:47:D0:7A:1E:73
Certificate issuer: /CN=003a0d14b03ea342ede3b2f49ad8caa2bf74e170
Certificate serial: 01856C6F05E1ED5B2E14143C4CEB3C62C74F
Authority key identifier: 00:3A:0D:14:B0:3E:A3:42:ED:E3:B2:F4:9A:D8:CA:A2:BF:74:E1:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ADoNFLA-o0Lt47L0mtjKor904XA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/3a252a-af4b-4eea-acdb-2fdd1fd99657/1/EL75w5BlrvRWAptvOAinR9B6HnM.roa
Signing time: Sun 01 Jan 2023 08:24:53 +0000
ROA not before: Sun 01 Jan 2023 08:24:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2852
IP address blocks: 193.84.192.0/20 maxlen: 24
193.84.192.0/19 maxlen: 24
193.84.208.0/20 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:31:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:6f:05:e1:ed:5b:2e:14:14:3c:4c:eb:3c:62:c7:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=003a0d14b03ea342ede3b2f49ad8caa2bf74e170
Validity
Not Before: Jan 1 08:24:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=10bef9c39065aef456029b6f3808a747d07a1e73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:13:5e:6a:93:60:40:4b:ea:65:1e:bb:fd:d2:
fb:97:e8:14:ac:91:7c:1c:5d:ac:99:2f:44:0a:71:
1e:14:93:9d:a9:24:bf:79:11:ac:a6:e9:78:da:24:
c5:bf:7c:6f:d6:8d:9c:f5:1b:5c:36:75:0a:9b:6f:
d8:d6:a9:bd:57:9f:41:1f:b4:12:d7:54:cd:3b:42:
6a:c1:9e:cc:67:ee:d0:ef:de:d3:06:1b:88:0d:41:
db:35:6b:ee:00:a6:65:09:da:0f:43:37:6a:78:76:
e7:be:8f:77:db:e5:23:66:32:13:d9:bb:d3:c0:0a:
85:f9:b5:e3:e3:fe:17:a7:97:37:b7:83:e3:03:cd:
4e:be:9e:b2:da:53:1c:99:7b:bc:53:35:f7:03:9f:
08:b3:95:d1:4e:e5:81:89:95:d1:18:f1:e7:5a:b8:
dd:bc:16:71:5b:76:bd:6e:81:29:16:4e:89:85:39:
45:81:56:c2:b1:78:f1:85:d6:2c:65:4c:84:fd:35:
ac:ad:d9:db:3b:f4:22:b1:9a:83:22:9e:f2:54:a5:
85:26:0e:68:71:cb:95:f7:af:c2:ea:b2:01:47:21:
07:4c:fa:6a:6c:8a:f2:35:a7:91:25:5f:df:37:76:
e2:88:33:b4:f8:50:91:cd:b0:ef:b1:e0:d7:6c:3f:
5f:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:BE:F9:C3:90:65:AE:F4:56:02:9B:6F:38:08:A7:47:D0:7A:1E:73
X509v3 Authority Key Identifier:
keyid:00:3A:0D:14:B0:3E:A3:42:ED:E3:B2:F4:9A:D8:CA:A2:BF:74:E1:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ADoNFLA-o0Lt47L0mtjKor904XA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/3a252a-af4b-4eea-acdb-2fdd1fd99657/1/EL75w5BlrvRWAptvOAinR9B6HnM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/3a252a-af4b-4eea-acdb-2fdd1fd99657/1/ADoNFLA-o0Lt47L0mtjKor904XA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.84.192.0/19
Signature Algorithm: sha256WithRSAEncryption
55:69:ae:81:8d:50:ce:c8:89:ac:e4:6a:1c:09:25:34:b9:31:
74:d2:6d:64:6b:1a:af:8c:d9:b7:36:2b:7b:22:70:0d:10:15:
20:85:0d:b8:96:17:34:29:52:27:8a:65:cd:e1:85:45:3d:00:
1d:f2:5a:03:16:1a:e6:18:0a:3d:16:d4:80:ce:9f:37:db:de:
5a:dc:4e:d1:96:f7:63:6d:c3:96:16:13:46:1e:34:65:d5:0b:
3a:94:a7:ce:83:9b:d0:8a:69:66:8e:37:44:64:c9:eb:ff:a0:
9d:b9:25:24:f8:45:f8:34:6d:68:e3:57:3a:8a:90:3a:73:37:
6a:de:df:0c:7c:b5:00:a7:f0:04:3c:91:42:ab:23:91:90:ff:
9c:b1:58:bf:80:76:12:e3:a9:6c:4f:ad:38:84:18:bd:96:a0:
52:3e:b5:86:78:c1:28:fd:37:4d:0d:c1:f8:5e:c5:ec:1b:99:
86:d6:c5:43:85:6d:06:12:51:00:e9:ac:d1:c4:fe:61:e1:3a:
cf:c6:81:0a:6f:83:29:26:c1:29:fe:28:9e:39:cb:05:8d:fd:
b5:d5:f6:fd:6d:cd:d7:8a:89:92:48:58:a1:42:56:cd:8f:e1:
d4:b2:70:80:20:3f:64:73:7b:95:0e:cb:f4:93:48:95:2c:4f:
87:e5:df:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:04 2024 by rpki-client on console-ams.rpki-client.org